CVE-2014-3803: Infoleak
The SpeechInput feature in Blink, as used in Google Chrome before 35.0.1916.114, allows remote attackers to enable microphone access and obtain speech-recognition text without indication via an INPUT element with a -x-webkit-speech attribute.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 35.0.1916.114
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3803?
CVE-2014-3803 is considered a high severity vulnerability that allows unauthorized microphone access.
How do I fix CVE-2014-3803?
To mitigate CVE-2014-3803, users should upgrade Google Chrome to version 35.0.1916.114 or later.
What are the potential impacts of CVE-2014-3803?
CVE-2014-3803 can lead to unauthorized access to microphone data and potentially compromise user privacy.
Which versions of Google Chrome are affected by CVE-2014-3803?
Google Chrome versions prior to 35.0.1916.114 are affected by CVE-2014-3803.
What can I do if I am unable to update to a safe version for CVE-2014-3803?
If you cannot update, consider disabling the SpeechInput feature in Google Chrome to prevent unauthorized access.